Home/US/Multi-State Compliance Training
Multi-state compliance training: different states, different clocks
Harassment prevention training is mandated in a growing number of US jurisdictions, and no two mandates share a structure. They differ on coverage, headcount thresholds, supervisor rules, duration, frequency, onboarding windows and recordkeeping. For an employer operating across state lines, the difficulty is rarely the training itself — it is knowing, on any given day, who is currently out of compliance and where.
Harassment Prevention
Multi-State
Jurisdiction Logic
Audit-Ready Records
The current mandate landscape
Six states carry broad private-sector mandates: California, Connecticut, Delaware, Illinois, Maine and New York. Beyond those, two other categories are easy to miss.
Industry-specific mandates. Washington's HB 1524, effective January 1, 2026, requires all managers and supervisors at covered employers to complete sexual harassment and assault prevention training. Covered employers include hotel, motel, retail and security guard employers, and property services contractors. Because the trigger is industry rather than headcount, employers screening state obligations by employee count will not see it.
Contractor and city-level obligations. Virginia requires training for state contractors, which typically arrives through procurement terms and reaches the contracts team before HR. New York City's Local Law 96 operates alongside the New York State requirement. Screening at state level alone misses both.
Colorado recommends training without mandating it — worth doing anyway, since a published state expectation is unhelpful to have ignored if a claim arises.
Why this is a tracking problem, not a content problem
Buying compliant content is the easy part; several vendors do it well. The difficulty is that two employees doing identical jobs for the same employer can sit on entirely different obligations because of where they work.
What varies between jurisdictions
- Who is covered — all employees, supervisors only, or specific industries
- Thresholds — headcount tests that differ by state, or none at all where the trigger is industry
- Duration — some states specify minimum training length, others do not
- Frequency — annual in some jurisdictions, every two years in others
- Onboarding window — how soon after hire training must be completed
- Interactivity — some states require live facilitation or a question mechanism, so passive video does not qualify
- Recordkeeping — what must be retained and for how long
The failure mode is predictable. Jurisdiction logic ends up in a spreadsheet maintained by one person in HR, the compliance position is only as current as that spreadsheet, and it silently breaks the moment someone relocates, a site opens in a new state, or a mandate changes — as Washington's did this January.
What the tracking layer needs to do
Capability
- Assign requirements by work location, not just role, so jurisdiction rules apply automatically
- Handle industry-specific triggers alongside headcount thresholds
- Track separate clocks per employee, since frequency and onboarding windows differ
- Reassign automatically when an employee relocates or a site opens in a new jurisdiction
- Distinguish supervisor requirements from all-employee requirements
- Flag approaching deadlines before they lapse rather than reporting them afterwards
- Produce dated individual completion records showing duration and content covered
- Retain records to the longest applicable standard across your footprint
Location-based assignment is the feature that matters most and the one most commonly absent. Systems built around role-based assignment handle a single-jurisdiction employer perfectly well and quietly mislead a multi-state one.
Beyond harassment prevention
The same jurisdiction logic applies to other mandated training an employer carries — OSHA obligations, industry-specific safety requirements, and state-level rules that arrive on their own schedules. Once the tracking layer understands work location, adding obligations to it is straightforward. Building it separately for each obligation is not.
For the state-by-state detail on harassment mandates specifically, see our guide to state harassment training requirements.
See who is out of compliance, by state
Location-based assignment, separate clocks per jurisdiction, and audit-ready completion records.
Book a demo